Zara Breach Exposes Data of 197K Customers via Compromised Vendor
Spanish fast-fashion retailer Zara (Inditex) suffered a data breach after hackers accessed databases using compromised credentials from a former tech provider (Anodot). ShinyHunters claimed responsibility and leaked a 140GB archive. Have I Been Pwned confirmed 197,400 unique email addresses were exposed along with geographic locations, purchase details (SKUs, order IDs), and support tickets. The company has not issued a detailed public statement on the full scope.
- email-addresses
- geographic-locations
- purchases
- support-tickets
A data breach at Zara has exposed the personal information of approximately 197,400 customers after attackers used compromised credentials from a former technology provider to access company databases.
Public reporting indicates the incident involved a former tech provider called Anodot. Hackers, operating under the name ShinyHunters, claimed responsibility and released a 140GB archive containing customer data. Industry research from sources such as DoxxScan™ continuous monitoring confirms that 197,400 unique email addresses were exposed, along with geographic locations, purchase records that include SKUs and order IDs, and support ticket details. The breach occurred through previously valid credentials that had not been fully revoked. Zara, part of the Inditex group, has not released a detailed public statement addressing the full scope of the exposure as of the latest available reporting.
Want the rest of this breakdown?
Sign up free to keep reading. Members get extended access, the weekly breach digest, and a complimentary DoxxScan™ to see if their identity is exposed in the breaches we cover.
A breach leaks your credentials. Then hackers chain those credentials to your address, family, phone, and employer using public broker sites. We’re the only tool built around that chain.
⚠ Were you in this breach?
Free email scanner. We check your address against 15B+ leaked records (including this breach) in 15 seconds — then show you the $14.99 cleanup that removes you from the broker sites aggregating leaked data.
Check my email — free →
